move Add_Product_Group_GroupForm / Add_Product_Type_Group_GroupForm / GlobalRoleForm to Pro

These three forms live in dojo/forms.py but reference Product_Group,
Product_Type_Group, and Global_Role — RBAC models that OS no longer touches
behaviorally. The only consumer of all three forms is pro/groups/views.py,
so they belong in pro/groups/forms.py.

Drop the Global_Role / Product_Group / Product_Type_Group import block from
dojo/forms.py.

This is the final OS-side RBAC interaction sweep — after this commit, every
remaining Product_Member / Product_Type_Member / Dojo_Group_Member /
Product_Group / Product_Type_Group / Global_Role mention in dojo/ is either
a model declaration (M2M `through=`, admin.site.register()) or a docstring,
not a behavioral interaction.

Author: devGregA

dojo/forms.py

@@ -28,11 +28,6 @@
 from tagulous.forms import TagField
 
 from dojo.authorization.authorization import user_has_configuration_permission, user_is_superuser_or_global_owner
-from dojo.authorization.models import (
-    Global_Role,
-    Product_Group,
-    Product_Type_Group,
-)
 from dojo.endpoint.utils import endpoint_filter, endpoint_get_or_create, validate_endpoints_to_add
 from dojo.engagement.queries import get_authorized_engagements
 from dojo.finding.queries import get_authorized_findings
@@ -2313,38 +2308,6 @@ def __init__(self, *args, **kwargs):
             del self.fields["exclude_product_types"]
 
 
-class Add_Product_Group_GroupForm(forms.ModelForm):
-    products = forms.ModelMultipleChoiceField(queryset=Product.objects.none(), required=True,
-                                              label=labels.ASSET_PLURAL_LABEL)
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-        current_members = Product_Group.objects.filter(group=self.initial["group"]).values_list("product", flat=True)
-        self.fields["products"].queryset = get_authorized_products("staff_only") \
-            .exclude(id__in=current_members)
-        self.fields["group"].disabled = True
-
-    class Meta:
-        model = Product_Group
-        fields = ["products", "group", "role"]
-
-
-class Add_Product_Type_Group_GroupForm(forms.ModelForm):
-    product_types = forms.ModelMultipleChoiceField(queryset=Product_Type.objects.none(), required=True,
-                                                   label=labels.ORG_PLURAL_LABEL)
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-        current_members = Product_Type_Group.objects.filter(group=self.initial["group"]).values_list("product_type", flat=True)
-        self.fields["product_types"].queryset = get_authorized_product_types("staff_only") \
-            .exclude(id__in=current_members)
-        self.fields["group"].disabled = True
-
-    class Meta:
-        model = Product_Type_Group
-        fields = ["product_types", "group", "role"]
-
-
 class DojoUserForm(forms.ModelForm):
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
@@ -2489,19 +2452,6 @@ def __init__(self, *args, **kwargs):
             self.fields.pop("reset_api_token", None)
 
 
-class GlobalRoleForm(forms.ModelForm):
-    class Meta:
-        model = Global_Role
-        exclude = ["user", "group"]
-
-    def __init__(self, *args, **kwargs):
-        super().__init__(*args, **kwargs)
-        current_user = get_current_user()
-        self.fields["role"].help_text = labels.ASSET_GLOBAL_ROLE_HELP
-        if not current_user.is_superuser:
-            self.fields["role"].disabled = True
-
-
 def get_years():
     now = timezone.now()
     return [(now.year, now.year), (now.year - 1, now.year - 1), (now.year - 2, now.year - 2)]